(1) If the customer has to create a pair of keys containing a public key that must be listed in the certificate issued by the certification body and accepted by the customer, the customer must use a secure asymmetric crypto system when creating such a pair of keys.
(2) Notwithstanding anything contained in sub-section (1), there is an agreement between the client and the certifying body regarding the security system to be used to generate the pair key, or where the certifying body approves a particular system, the security system so agreed or approved. It will be the customer's duty to use it.